Test ID:	1.3.6.1.4.1.25623.1.0.124166
Category:	Denial of Service
Title:	ISC BIND DoS Vulnerability (CVE-2022-2881) - Linux
Summary:	ISC BIND is prone to a denial of service (DoS) vulnerability.
Description:	Summary: ISC BIND is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: When an HTTP connection was reused to request statistics from the stats channel, the content length of successive responses could grow in size past the end of the allocated buffer. Vulnerability Impact: The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process. Affected Software/OS: ISC BIND version 9.18.0 through 9.18.6 and 9.19.0 through 9.19.4. Solution: Update to version 9.18.7, 9.19.5 or later. CVSS Score: 8.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-2881 https://kb.isc.org/docs/cve-2022-2881 https://security.gentoo.org/glsa/202210-25 http://www.openwall.com/lists/oss-security/2022/09/21/3
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.